BT> Here is an updated version of Eric Biederman's patchset toBT> implement tagged directories in sysfs ported on top ofBT> 2.6.26-rc2-mm1.

With this set applied, I am able to clone() with CLONE_NEWNET, get anisolated netns, and move interfaces into that namespace. This removesthe last barrier blocking the implementation of full containers (withnetwork isolation) in libvirt.